[Debian-olpc-devel] md5sum mismatch for sugar-0.89.1.tar.bz2

[Sascha Silbe]

Hi!

After checking out a fresh copy of the "sugar" collab-maint git repo [1],
"debian/rules get-orig-source" downloads sugar-0.89.1.tar.bz2 and fails
due to mismatching md5sums:

(squeeze-amd64-build1)sascha.silbe at twin:/tmp/sascha_silbe/tmpbox.vhRoGNeqPC$ git clone git://git.debian.org/git/collab-maint/sugar
Initialized empty Git repository in /tmp/sascha_silbe/tmpbox.vhRoGNeqPC/sugar/.git/
remote: Counting objects: 42059, done.
remote: Compressing objects: 100% (11938/11938), done.
remote: Total 42059 (delta 31324), reused 40100 (delta 29805)
Receiving objects: 100% (42059/42059), 8.12 MiB | 2.85 MiB/s, done.
Resolving deltas: 100% (31324/31324), done.
(squeeze-amd64-build1)sascha.silbe at twin:/tmp/sascha_silbe/tmpbox.vhRoGNeqPC$ cd sugar/
(squeeze-amd64-build1)sascha.silbe at twin:/tmp/sascha_silbe/tmpbox.vhRoGNeqPC/sugar$ debian/rules get-orig-source
Downloading sugar-0.90_0.89.1.orig.tar.bz2 from http://download.sugarlabs.org/sources/sucrose/glucose/sugar/sugar-0.89.1.tar.bz2 ...
2010-09-23 20:14:02 URL:http://download.sugarlabs.org/sources/sucrose/glucose/sugar/sugar-0.89.1.tar.bz2 [428277/428277] -> "../tarballs/sugar-0.90_0.89.1.orig.tar.bz2" [1]
Expecting upstream tarball md5sum a108e862aa7800c784d87e3228d7b119, but a679ceb2972a5e197f9708f139290a3f found
Upstream tarball md5sum is NOT trusted! Possible upstream tarball forge!
Purging downloaded file. Try new download.
make: *** [get-orig-source] Error 1
(squeeze-amd64-build1)sascha.silbe at twin:/tmp/sascha_silbe/tmpbox.vhRoGNeqPC/sugar$ 


I'm a bit puzzled. Why does it download 0.89.1? And why does it expect
the md5sum of 0.89.7 for the 0.89.1 tarball?

Sascha

[1] git://git.debian.org/git/collab-maint/sugar
--
http://sascha.silbe.org/
http://www.infra-silbe.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/debian-olpc-devel/attachments/20100923/36e61ec6/attachment.pgp>